NetSight
high8.8

CVE-2023-31209

Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0p4 leads to arbitrary command execution for authenticated u…

Impact

Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0p4 leads to arbitrary command execution for authenticated users.

Affected products

VendorProductAffected versions
CheckmkCheckmk
Versions 2.0.0, 2.1.0, 2.2.0
Tribe29Checkmk
before 2.0.0

Weakness classification

References